Federal Register #2026-08978

CFTC Insider Risk Program Privacy Act System of Records Announcement

The Commodity Futures Trading Commission (CFTC) is establishing a new Privacy Act system of records for its Insider Risk Program. - Government Buyer: - Commodity Futures Trading Commission (CFTC) - Cyber and Physical Security Branch, Division of Administration - Headquarters located at Three Lafayette Centre, Washington, DC - OEMs and Vendors: - No OEMs or vendors are mentioned; this is not a procurement opportunity - Products/Services Requested: - No products or services are being requested - The system will collect and manage records related to insider risk investigations, including: - Network monitoring data - Personnel records - Incident reports - Access logs - Physical security records - Unique or Notable Requirements: - The system is unclassified and protected by administrative, technical, and physical safeguards - Records are used to detect, deter, and mitigate insider risks to CFTC assets and operations - Notice includes information about routine uses, record access, and contesting procedures - Place of Performance: - CFTC headquarters at Three Lafayette Centre, Washington, DC

Description

The Commodity Futures Trading Commission (CFTC) is establishing a new Privacy Act system of records titled "CFTC-59, Insider Risk Program Records." This system contains information collected and maintained to administer the Insider Risk program, which aims to detect, deter, and mitigate risks to individuals, facilities, information, equipment, networks, and systems within the CFTC. The records include data from network monitoring, personnel records, incident reports, and other sources related to insider risk investigations. The system is effective June 15, 2026, with comments due by June 5, 2026.

View original listing